The script is able create new role based on the current setting in the script or update the “UserScope” of an existing role. In order to avoid this, I wrote the script below, so I will be able to run it whenever is needed. I would need to find all Organizational Units from Active Directory manually and run the command in PowerShell trying not to leave any Organizational Unit out of the scope. I could do it manually by for each location but it would take a lot of time. In this case I have used UserScopes, which are based on Active Directory Organizational Units. In order to limit the users, they are able to perform administration, we need to use scopes.

The problem is that if we apply these permissions directly to them, they will be able to perform administration for all users. In order to be able to provide this to local IT administrators, we have to provide them with the “CSUserAdministrator” permissions on Skype for Business. Permissions only for the users responsible for.Enable / Disable Skype for Business Telephony for a user.Modify settings for a user in Skype for Business.Enable / Disable Skype for Business for a user.Local IT administrator need to be able to I had a request to provide delegated permissions to local IT administrators on Skype for Business server through the web console.

Lets see first few details and what you need to know about it. The script that you will see below is about providing delegated permissions to IT Administrators in Skype for Business. Skype for Business Delegated Permissions Scenario:

Skype permissions settings